§ 59 NDSG
Administrative offences
(1)An administrative offence shall be committed by any person who
(2)as a person who has or had official access to non-publicly accessible personal data at a public body or its processor, processes such data for a purpose other than the purpose of the respective lawful performance of tasks, by
(3)storing, altering or transmitting them,
(4)making them available for retrieval,
(5)retrieving them or procuring them for himself or herself or another person, or
(6)processing them in any other manner
(7)obtains, by pretending false facts, personal data which are processed within the scope of application of this Act and are not publicly accessible, for himself or herself or another person, or has them disclosed by means of transmission, dissemination or any other form of provision.
(8)The administrative offence may be sanctioned with a fine of up to 50,000 euros.